Yelp/osxcollector — pull request #24 by ivanlei (2014-12-19 16:51:08+00:00)
Title: Updated scoring provides more succinct results

* Add a whitelist for domains not to lookup. This removes noisy domains an analyst already understands.
* Use SHA2 vs. MD5 for VirusTotal lookups. This gets rid of a surprising number of false positives.
* Use the ```found``` flag for OpenDNS domain lookups. This is better than ```status == 0``` for knowing if OpenDNS actually knows about a domain.
* VirusTotal domain lookups are hard to score. They generate more false positives than is useful. Changed the AnalyzeFilter to do fewer VT domain lookups.